{
    "properties": {
        "PayloadContent": {
            "default": {
                "Key Type": "RSA",
                "Keysize": 1024,
                "Retries": 3,
                "RetryDelay": 10
            },
            "description": "This dictionary contains the payload contents",
            "properties": {
                "CAFingerprint": {
                    "description": "Optional. The fingerprint of the Certificate Authority certificate.",
                    "type": "string"
                },
                "Challenge": {
                    "description": "Used as the pre-shared secret for automatic enrollment",
                    "type": "string"
                },
                "GetCACaps": {
                    "description": "If you add a dictionary with the key GetCACaps, the device uses the strings you provide as the authoritative source of information about the capabilities of your CA.",
                    "properties": {},
                    "type": "object"
                },
                "KeyType": {
                    "default": "RSA",
                    "description": "Optional. Currently always \"RSA\".",
                    "enum": [
                        "RSA"
                    ],
                    "type": "string"
                },
                "KeyUsage": {
                    "default": 0,
                    "description": "A bitmask indicating the use of the ky. 1 - signing, 4 - encryption, 5 - signing and encryption",
                    "type": "number"
                },
                "Keysize": {
                    "default": 1024,
                    "description": "Key size in bits",
                    "enum": [
                        1024,
                        2048
                    ],
                    "type": "number"
                },
                "Name": {
                    "description": "Optional. Any string that is understood by the SCEP server. For example, it could be a domain name like example.org. If a certificate authority has multiple CA certificates this field can be used to distinguish which is required.",
                    "type": "string"
                },
                "Retries": {
                    "default": 3,
                    "description": "The number of times the device should retry if the server sends a PENDING response",
                    "type": "number"
                },
                "RetryDelay": {
                    "default": 10,
                    "description": "The number of seconds to wait between subsequent retries. The first retry is attempted without this delay",
                    "type": "number"
                },
                "Subject": {
                    "description": "The representation of a X.500 name represented as an array of OID and value. OIDs can be represented as dotted numbers, with shortcuts for country (C), locality (L), state (ST), organization (O), organizational unit (OU), and common name (CN).",
                    "items": {
                        "description": "This array holds another array which holds an OID value pair",
                        "items": {
                            "description": "An array representing an OID and value pair.",
                            "items": {
                                "description": "One item in the array representing a pair of OID and value",
                                "type": "string"
                            },
                            "type": "array"
                        },
                        "type": "array"
                    },
                    "type": "array"
                },
                "SubjectAltName": {
                    "description": "Specifies the Subject Alt Name for the certificate",
                    "properties": {
                        "dNSName": {
                            "description": "DNS Name",
                            "type": "string"
                        },
                        "ntPrincipalName": {
                            "description": "NT Principal Name",
                            "type": "string"
                        },
                        "rfc822Name": {
                            "description": "RFC 822 (email address) string",
                            "type": "string"
                        },
                        "uniformResourceIdentifier": {
                            "description": "Uniform Resource Indentifier",
                            "type": "string"
                        }
                    },
                    "type": "object"
                },
                "URL": {
                    "description": "The base URL for the SCEP server",
                    "type": "string"
                }
            },
            "type": "object"
        },
        "PayloadDescription": {
            "default": "Configures SCEP settings",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "SCEP",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.security.scep",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.security.scep",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        }
    },
    "title": "com.apple.security.scep",
    "type": "object"
}